Arbitrary User Password Change Vulnerability in Doccure Theme for WordPress

CVE-2025-9114

What is CVE-2025-9114?

The Doccure Theme for WordPress is susceptible to an arbitrary password change vulnerability that affects all versions up to and including 1.4.8. This security flaw allows unauthenticated users to exploit the theme's user-controlled access mechanism, bypassing necessary authorization checks. Consequently, attackers can alter user passwords, potentially gaining unauthorized access to user accounts, including administrative ones, putting the integrity and security of the website at risk.

References